This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft File: OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json) Hash identifier: eVV5Jdc6hnhNm+ZwuZ//7dabc6My02WwhFR12YjYoUw= Subject key identifier: 37:61:81:61:B2:2F:57:8F:4A:B0:DD:70:A6:58:43:97:D1:94:34:38 Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35 Certificate issuer: /CN=384cddcd74d04229583d2c2beed073e0096ba335 Certificate serial: 019AF50ADA2347FAB117D11081B91F6F7E4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft Manifest number: 07B5 Signing time: Sat 06 Dec 2025 19:02:00 +0000 Manifest this update: Sat 06 Dec 2025 19:02:00 +0000 Manifest next update: Sun 07 Dec 2025 19:02:00 +0000 Files and hashes: 1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: 6oPdjKHHvSlWbOeb56Mx4vF5MMkDa0vK29MqZmKg8V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:da:23:47:fa:b1:17:d1:10:81:b9:1f:6f:7e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335 Validity Not Before: Dec 6 19:02:00 2025 GMT Not After : Dec 7 19:02:00 2025 GMT Subject: CN=37618161b22f578f4ab0dd70a6584397d1943438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:ff:c2:61:13:b8:f9:df:9f:a8:ff:25:87: 87:73:b1:39:db:c3:fd:70:54:fd:9f:ee:99:68:3b: f6:a9:f9:20:0e:87:5f:7e:a3:4c:50:27:a0:63:0b: 1c:04:b5:41:ea:f4:d4:0d:a7:bf:8d:04:bd:75:a1: 7f:51:82:b9:60:9d:68:cb:9d:af:95:bd:4d:e6:0d: 54:24:ee:52:00:c3:83:ba:44:6e:0c:dd:bd:17:50: 59:e9:f0:87:51:f9:7e:2d:b3:54:b5:45:de:f1:53: d5:b4:dc:bb:f8:ea:59:c4:ba:52:41:84:20:58:46: e0:d5:27:a9:fb:20:91:9b:e0:44:da:2a:2a:7f:29: cf:75:dc:00:c2:3b:25:79:7f:cd:49:be:58:8c:d4: cf:d4:a8:b3:be:9f:f5:ff:e9:55:76:4b:60:06:5f: 37:33:a1:21:03:9a:ac:2c:d8:e4:d0:dd:8a:47:6a: 9a:34:2f:d1:f1:4f:46:95:0f:3c:17:44:99:66:40: ef:cd:9d:24:ec:6a:e5:d9:2e:8d:86:ac:a1:b3:8b: 52:e4:20:23:9c:8e:08:a1:4a:88:4b:dd:e0:b6:92: 5a:5d:3e:76:c4:3d:34:cc:83:ca:de:7c:86:e5:fe: 27:a5:5f:2e:43:e7:82:7b:9f:a1:3d:1b:13:3c:47: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:61:81:61:B2:2F:57:8F:4A:B0:DD:70:A6:58:43:97:D1:94:34:38 X509v3 Authority Key Identifier: keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:74:30:ae:4e:38:3b:61:dc:d4:55:af:bd:f4:05:f1:69:26: 54:bb:68:3b:05:64:a4:15:6e:0e:3e:8d:6c:4f:fa:7a:c6:50: 02:9b:0c:73:3c:da:c3:d4:84:8a:39:ee:33:0e:15:9e:af:0b: 0a:83:16:32:b9:fc:e9:c4:79:73:f1:88:49:b9:ae:ae:16:ce: 68:85:68:07:b2:d0:52:43:ab:83:6d:4a:fa:5b:d9:f6:ac:9e: c4:cb:f5:4a:22:06:02:a5:87:75:c9:35:d9:88:d1:19:1c:4c: 2e:c3:1e:4d:95:09:71:cc:17:8a:fd:04:2f:e2:ef:bb:e1:fe: 51:c6:43:c6:a9:17:57:e7:55:90:03:2a:3a:73:97:b9:a3:67: e0:98:ae:41:d4:04:8e:7c:1c:dc:4f:c4:19:d8:ed:a7:b0:86: 42:7f:69:8d:19:31:bb:72:61:f7:35:4e:2b:dd:80:2f:0a:d1: f1:da:68:ec:70:27:ef:4b:70:d2:24:4f:2d:ce:08:c8:df:c3: cd:92:25:ae:9a:fa:a7:88:a2:8c:7d:76:b8:42:2c:ca:c1:0d: ce:5f:6b:c4:cf:b0:0c:fe:64:26:51:63:a4:a8:be:61:5f:03: 76:06:3e:20:1a:ef:84:33:db:f5:86:9a:8c:46:f5:c3:2f:88: 6f:0b:22:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtojR/qxF9EQgbkfb35LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NGNkZGNkNzRkMDQyMjk1ODNkMmMyYmVlZDA3M2UwMDk2 YmEzMzUwHhcNMjUxMjA2MTkwMjAwWhcNMjUxMjA3MTkwMjAwWjAzMTEwLwYDVQQD EygzNzYxODE2MWIyMmY1NzhmNGFiMGRkNzBhNjU4NDM5N2QxOTQzNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVv/wmETuPnfn6j/JYeHc7E528P9 cFT9n+6ZaDv2qfkgDodffqNMUCegYwscBLVB6vTUDae/jQS9daF/UYK5YJ1oy52v lb1N5g1UJO5SAMODukRuDN29F1BZ6fCHUfl+LbNUtUXe8VPVtNy7+OpZxLpSQYQg WEbg1Sep+yCRm+BE2ioqfynPddwAwjsleX/NSb5YjNTP1Kizvp/1/+lVdktgBl83 M6EhA5qsLNjk0N2KR2qaNC/R8U9GlQ88F0SZZkDvzZ0k7Grl2S6Nhqyhs4tS5CAj nI4IoUqIS93gtpJaXT52xD00zIPK3nyG5f4npV8uQ+eCe5+hPRsTPEceKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdhgWGyL1ePSrDdcKZYQ5fRlDQ4MB8GA1UdIwQY MBaAFDhM3c100EIpWD0sK+7Qc+AJa6M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0V6ZHpYVFFRaWxZUFN3cjd0Qno0QWxyb3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNTFjM2UtOTVkOC00ODNiLThkYzIt OTk4YWQ1MGY0YTJhLzEvT0V6ZHpYVFFRaWxZUFN3cjd0Qno0QWxyb3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xNTFjM2UtOTVkOC00ODNiLThkYzItOTk4YWQ1MGY0YTJh LzEvT0V6ZHpYVFFRaWxZUFN3cjd0Qno0QWxyb3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAznQwrk44 O2Hc1FWvvfQF8WkmVLtoOwVkpBVuDj6NbE/6esZQApsMczzaw9SEijnuMw4Vnq8L CoMWMrn86cR5c/GISbmurhbOaIVoB7LQUkOrg21K+lvZ9qyexMv1SiIGAqWHdck1 2YjRGRxMLsMeTZUJccwXiv0EL+Lvu+H+UcZDxqkXV+dVkAMqOnOXuaNn4JiuQdQE jnwc3E/EGdjtp7CGQn9pjRkxu3Jh9zVOK92ALwrR8dpo7HAn70tw0iRPLc4IyN/D zZIlrpr6p4iijH12uEIsysENzl9rxM+wDP5kJlFjpKi+YV8DdgY+IBrvhDPb9Yaa jEb1wy+IbwsicQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:16:19 2025 by rpki-client